DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
fde28916801999a9f1b0eea911a7c6d9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fde28916801999a9f1b0eea911a7c6d9_JaffaCakes118
Size
7KB
MD5
fde28916801999a9f1b0eea911a7c6d9
SHA1
dc12e393c7d859896f86d53ff40d7abce5009bf1
SHA256
ead8065f610639710f074541880d043467ecf0effea40c072f47e47ed8cfd967
SHA512
dc191a9aea77b82b56d7f1d41e9668fcdc7bff30c5c23db250d32283b1752fff98b7cb9a49c7ccf6649c100305fe84985cbbcb107657d4bb60823a8501145270
SSDEEP
96:W7oyU/zg6beezohbrZWuYp8x7dWzBN+K5Y/jbMc9PicfA9Y26QdMCi1DmVkdJYEe:W7ot73e1yd8JIBN+Ka3Mc8CnZDDYr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fde28916801999a9f1b0eea911a7c6d9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ